kriss/yii2-thread

The small codebase is easy to inspect, with a clear README and only one runtime dependency. There is no automated testing or security scanning, and neither releases nor repository commits have appeared since 2017.

Latest 1.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, with the latest published in May 2017 and none in the last nine years. This is strong evidence of abandonment for a dependency, although the package is not deprecated.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive since 2017.

Repo issue activity

There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month; this does not provide evidence of active maintenance.

Repo tooling

Composer is used for the build, but the repository has no security-scanning tools. That is a meaningful transparency and maintenance gap for a dependency, though not severe on its own.

Repository archived

The repository is not archived, which is a positive sign, but its last push was in May 2017 and therefore does not demonstrate current maintenance.